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SUPPLEMENTAL OPINION AND ORDER 

On October 30, 2009, the Court authorized the acquisition by the National Security 
Agency (“NSA”) of the tangible things sought in the government’s application in the above- 
captioned docket (“BR metadata”). This supplemental opinion and order reiterates the manner in 
which query results may be shared within the NSA, as informed by the testimony provided by 
government, and elaborates on the reporting requirement imposed in the Court’s order of 
October 30. 
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Sharing of BR Metadata Query Results Within the NSA 

The Court’s order permits NSA analysts who are authorized to query the BR metadata to 
share the results of authorized queries among themselves and with other NSA personnel, 
“provided that all NSA personnel receiving such query results in any form (except for 
information properly disseminated outside NSA) shall first receive appropriate and adequate 
training and guidance regarding the rules and restrictions governing the use, storage, and 
dissemination of such information.” Primary Order at 1 5, Docket No. BR 09-15 (October 30, 
2009) (“October 30 Order”). The order further provides: “[a]ll persons authorized for access to 
the BR metadata and other NSA personnel who are authorized to receive query results shall 
receive appropriate and adequate training by NSA’ s [Office of General Counsel] concerning the 
authorization granted by this Order, the limited circumstances in which the BR metadata may be 
accessed, and/or other procedures and restrictions regarding the retrieval, storage, and 
dissemination of the metadata.” Id. at 1 3. The Court’s prior order in this matter contained 
identical provisions. Primary Order at 12, 14-15, Docket No. BR 09-13 (September 3, 2009) 
(“September 3 Order”). 

In September, 2009, the Court received oral notification that NSA analysts had, on two 
occasions, shared the results of queries of the BR metadata with NSA analysts involved in the 
investigation who had not received “appropriate and adequate training and 
guidance” as required under the September 3 Order. Order Regarding Further Compliance 
Incidents at 2-3, Docket No. BR 09-13 (September 25, 2009). On September 25, 2009, the Court 
ordered representatives of the NSA and the National Security Division (“NSD”) of the 
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Department of Justice to appear for a hearing in order to inform the Court more fully of the scope 
and circumstances of the incidents, and to allow the Court to assess whether the Court’s order 
should be modified or rescinded and whether other remedial steps should be imposed. Id at 4. 

At the hearing, which was conducted on September 28, 2009, the government confirmed 
that NSA analysts authorized to query the BR metadata had sent query results to NSA personnel 
who had not received the training and guidance required by the Court’s September 3 Order. 
Transcript at 6-7, Docket No. BR 09-13. Specifically, the government reported that the NSA had 
created an e-mail distribution list (the NSA representative referred to this list as an “alias”) for 
the 189 NSA analysts who were working on the threat, only 53 of whom had 

received the required training and guidance. Id. at 6-7, 12-13. On September 17 lh , an NSA 
analyst authorized to query the BR metadata sent an e-mail to the alias that 

included a “general analytic summary” of the results of a query of the BR metadata. Id. at 7. 
After a recipient brought the e-mail to the attention of the NSA’s Oversight and Compliance 
Office and Office of General Counsel, the Oversight and Compliance Office issued guidance on 
September 21 st , “reemphasizing the point, no dissemination of query results in any form.” Id. at 
14. The NSA’s Counter-terrorism organization sent a similar reminder on the morning of 
September 22 nd , however, that afternoon, a second NSA analyst who was authorized to query the 
BR metadata sent a situation report to the alias that contained information 

derived from a query of the BR metadata. Id. at 1 5. 

The government testified at the hearing that the NSA has taken steps to ensure that any 
sharing of the results of queries of the BR metadata within the NSA is fully consistent with the 
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